
e FBI Security Divisions':' X Yes 
} received a 3 year A'TO um.il 2011 by b7E 

Yea No X I)orrt K.uow 


ce April L 7,20037 
;• changes: 

K5 its | l ie iecoreorste 0:c 

set eras seourby-rebkd chaoses were smegrated b7E 

es were implemented and followed the defined 
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FBI PRIVACY THRE SHOLD ANALYSIS (FTA ) 

NAME OF S YSTEM: | | 

| [ Management Protocols .ns defined by Bureau policy and procedures, b 7 E 

i'Contrrme to Question 2 } 

.NO (If "no," dsc FT A is complete and should bo sent so FBI OGCfo Privacy nod Civil Liberties 

UniU.PCI.iJ) for review, approval, and fowarding to DOTs Privacy and Civil Liberties Office. Unless 
yox; are otherwise advised, no FI A is required.) 

2. Do the changes involve the collection, maintenance. or dissemination of information in identifiable 
foots about individuals'? 

YES (If "yesC Tease process! to Question 3.; 

...X NO (If "now the FT A o'. complete arid should be scat to FBI OGC's Privacy and Civil 

Liberties Unit (PCLU? for review, approval and tUrwardfog to DOJ's Privacy and Civil Liberties 
Office. Unless you are otherwise advised, ms PIA is required,.? 

3. is rite system solely related to internal government omoarfons 7 

.YES If "yes," is tabs a Major bsformmOr System j as listed ost OGCs FBINET website)?: 

.Yes. (JPyesA a full PIA ;s required.. PTA is complete..? 

_No. (If "no," the PTA is complete and should be sertt to FBI OGCs Privacy 

and Civil Liberties Unit (PCLU) for rev iew, approval, and forwarding to DOJ’s 
Privacy and Civil Liberties Office Unless you arc otherwise advised, no PIA is 
required, t FBI aod DO? reviewing officials reserve the right to require a PIA.?? 

.NO (if ''no A go to section 10 to determine if a Axil or show-form PIA is required.) 


systems developed after Aped IT 2003. 

i What is the purpose of me system'/ (Answer in tlctatl unless detabs already provided in A. 2 above?: 


t<f ootume to Qtteatiott 2.) 

Docs the system collect, mamtain or disseminate inhumation in kiemlfmble form ahont imfividuaU? 
.VF5 (If ye-a," please proceed to Question A) 

.NO Of "now the P TA is complete and should be mot to FBI OGCs Privacy and Civil Liberties 

Unit (PCLU) for review, approval, and forwsrrdmg to DOJ’s Privacy and Civil Liberties Office. 
Unless you are otherwise advised, no PlA is required..? 
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IdSOLASSfFIFD 


nnnm\v\ hirfahold 


NAME OF SYSTEM i PROJECT; \~ 


Bemed F ro?i>; 
CdoMnd IN; 
Reason, 
DeebssHV Lon 


STATE M/PROJECT POC 

FBI OOC/PCLE POC 

Nsmc: SA| j 

N oos As* |_ | 

Proorant Office: SET 

N > * V\ 5s' 

Phene :| 1 

-fo.-m N ' M , m I H 

Chooc. |_|_| 


FBI DIVISION' i NIL R MEDIATE A PPROYA LA: 



Progrsra Division: 

FBI HQ Division: Notional See 

inn- Brands 

IMoeram Menaae;- 

foananae: 

v s, set ae | I 

(or other appropriate 

Date signed: 

Datesiaoed: ^foCM folfovN 

caecuEv* as Division 

Name: 

Name: SA| ‘ 1 

deiemuaes) 

Title: 

Tele: |_|Progmm Manager 

Division Acvieo f'ffker 

fogr'inhuc: 

v _ ,n e r] | 


Dam signed: 

D te > mk>. 


Name: 

V o'". \| | 


I tie 

Tike: AsVnm? Seeiion Chid' 


b7C 

b7E 


Ait*;' aii division approved, forward signed herd copy pfos eieoiromc copy :o FBI OGCYPCLD -JEM 7.>3fo. 
FINAL FBI APPROVAL i DETERMINATIONS / CONDITIONS: 


IMA scanned; No Yes: 

SORN/SOAN revision scanned: N 

' - 

A on i ica b i e SO A N (s t: 

\ « s A> KvT A , n Mh\ \ ' N 

o .Yes 


Consult with RAID to ideinify/resolve ;mv Federd istcorddeleclronk records issues; No 

Tea: 

Prepssfe/revtsehsbd Privacy Act fo>(3} sooensenis f 

a V Yvs-Fnois 


Da\ id C. Larson. Deputy General Cooosei 

fogstattne; , v V'" A'',,..-cf md 

Gate do ed X 

■sc ..A 

FBI Privacy and Cod Liberties Officer 

a... m ^/fo" oo-m> 
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UNCLASSIFIED 

FBI PRIVACY THRESHOLD AN ALYSIS (FTA) _ 

NAME OF SY STEM / PROJECT: | 


FBI approval FBI OGC.PCLU 


• Signed original to ok 190-HQ-C1321794 {fWdto JEH I.B209 via PA-520) 

Copies (recipients please prim/repsoduce as needed for Progranv'Dtvisfos fik'(s)): 

1 DO) Office of Privacy cod Civil Liberties n m£ ‘ t > 5 * vs v ^ A 

(if cfacvified vie bend delivery to IBS Peon. Ave. NW, Suite 940. 20530) 

2 - FBI OCIO / 01PP (JED 9370, an n:\Z 


- FBI SecD/AU (elec tronic copy: vie e-m &il to UC 
. -KMUKMV \ j\v I I 

2 •• Prograss .Division PCX.' /Privacy Officer 
2 - FBI.HQ Division POC /Privacy Officer 


1 - OGCYPCLU ostra.net 
1 - PCLU UC 
1 - PCLU Library 
i - PCLU Tickler 
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UNCLASSIFIED 

FBI PRIVACY THRESHOLD AN ALYSIS (FT At _ 

NAME OF SYSTEM / PROJECT: I 


T 


Field Offices have already^ 


3 te use of SharePobi m the 
are not encompassed within this 


4. IF s p' , v „v v t nm n t e i » ) s wnwv w*. »d xo t ' 

toed: 


| s 1 ;r ■>ug h Jv .> -c v' uL udV afo 
|shared within Field Offices . |_| 


5. Does the systemforolect collect maintain. or disseminate any information about individuals In 
identifiable form, i.e.. is information linked to or linkable to specific individuals (winch is the definition 
of personally identifiable information (PH))? 


. X HO. StofK The I PA is now complete and after division approval^) should he 
submitted to FBI OGC/FCLli for Fmai FBI approval Unless you are 
otherwise advised, no Pi A Is required. 


YES. 1 f yes, please continue. 

6. Access 

a. Describe the means of accessing the system/project and transmitting information to and loa¬ 
the sy ate m/project: 

b. Describe who within the FBI will have access to the information in the system and the controls 
for ensuring that only authorized persons cart access the information: 

c. Describe who outside the FBI will have access to the Information In the system/protect and the 
controls for ensuring that only authorized versons cart access the information: 


INCLAhhlElFB 
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UNCLASSIFIED 

FBI PRIVACY THRESHOLD AN ALYSIS I, FT A? _ 

NAME OF SYSTEM / PROJECT; | | b7E 

7. Docs the system/project pertain only w government employees, contractors. or consultants? 

.HO 

YES. if yes, provide a brief explanation of the quantity and typo of information: 

8. h mfornuniou about United States citizens or lawfully admitted pennanenf resident aliens retrieved 
from the aystem/project by name or other personal identifier? 

NO . YES 

Ho Infor mation about U.S. citizens of lawfully admitted permanent resident aliens is retrieved Horn 


9. Are Social Security Numbers collected maintained or disseminated from the system/projeef? 

_NO 

^ 5 N K ! ON V U 'I t-bts Oil N [V il I V A , N o 

imeUfowa-C acuwOo 

- What is the purpose for the collection. maintenance or dissemination of SSNs? 

D .w <L to <. ( . '"‘An I a t <, 'V . i rv nl ,v s. u . vow o 

why not)? 

- In light of Federal policy to reduce the use of SSNs, is it feasible to minimize 
system/proieeLaser access to SSNs in the system/prpieet (why or why nor)? 

10, Does the systern/projec! collect any information directly from the person who ts the subject of the 
fodiumaifon? 

.NO 

YES If yes for systems Aofocvs other than those relai \z to criminal investigations, CT. 
or Cl; 

- Indicate how such information is collected: 

- .oe\ ' \ aw K$ r mn at . w .o r- . wd t» 0000- ' fo no. w\ 

from the information subject (this includes paper or electronic forms s: 

- Are information subjects item whom information Is directly collected provided a 

written Privacy Act (e)(3) statement (either on the collection, form or via a separate 
notice)? Yes No 
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UNCLASSIFIED 

FBI PRI VACY THRESHOLD AN ALYSIS l.PTAs _ 

NAME OF SYSTEM / PROJECT: I I 

11. Has the system undergone Cord Scabon & Accreditation • C&A) by the FBI Security Division I Sec 

\D I 0 \ Civ. >0J'0> 1 M A V -T\'p s p ( s,k lu'a Ai < 

date: 

YES. If yes, please: 

- Provide date oflast C&A cerdikationYe-certlncadon; 

Dorf s. Know 

12. 1$ this system/project the subject of an OMB-300 budget submission? 

NO .Do itt know 

'A m-- x i i KOCH'' - u\ '.a l'S. ' tK 

-'Sn wgu ^ x E v j* ( uLU\lbi\, a 

13. v,usuea > ' , - v c, 4rn ■, > \>vr n ned ly, Ac V ' 

NO YES . Pond know 

I. 4. Status of System? Project: 

It ' w c ", nor" pmvc P\. uowm jMop, I he I I V ss non vompks< and 
niter division npprovalfs) should be submitted to FBI OGC7PCLU for final FBI 
approval and determination if PI A and/or other actions are required „f 

Tins is an existing system/project. [Continue to Section O.j 

II. EXISTING SYSTEMS / PROJECT'S 

1. 7Y,v % \\ - ;re y.-Yen promt ,i <k\Ao|vd " 

2. Has the a Aom rr ycet undergone c> '■igudkam changes some \pnl iEHo •" ' 

NO. If no, proceed to next, question (HO). 

YES, if yes, indicate winch of the following changes were involved (mark all boxes 
that apply): 

A conversion from paper-based records to an electronic system. 
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UNCLASSIFIED 

FBI PRIVACY THRESHOLD AN ALYSIS <PT At _ 

NAME OF SYSTEM / PROJECT: | 

. A change from irdormation in a format that is anonymous or uon-bdentiflable to a 

( M‘u kv>' 01 V ■. "> TkUxUl i sun >1' 

x o k-iri, wk ' s » v v os p v. J' 

changes how Information in identifiable form is managed. (For example, a change 
that would create a more open environment and/or avenue lor expos are of data that 
previously did not exist./ 

.. A change that results in information in • den tint able .form being merged., centralized, 

or matched with other databases. 

A new method of authenticating the use of and access to information in identifiable 
form by members of the public . 

.. A systematic l.ncorpoxaSion of databases ofinformatiorr in identifiable form 

purchased or obtained from commercial or public sources. 

A new interagency use or shared agency function that results in new uses or 
. vunx'M): m'o'Xh ■'!: u he mffoh .. mm 

. A change that results In a new use or disclosure of information in iderfobaEie form. 

A 1 * t ' is o« lui o or i, Ft hot Km J ted 

I mo the syne m/pro; eet. 

Changes no not revolve a change in foe type of records maintained, the individuals 
on whom records are maintained, or the use or dissemination of Information from 
the system/proiect, 

. Other. [Please pro vide brief explanation): 

h. Does a PI A lor this system/projeci already exist? 

._ NO 

.YES, lives, please provide date/title of the PI A: 


The I PA is now complete and after division approvals} should he submitted to FBI OGC/PCII for 
bind FBI approval and deterudnatfon If PI A. and/or other actions are rep aired . 
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FBI Privacy Threshold Analysis (PTA) Cover Sheet (ogc/pclu (Rev. 07/06/07) 


NAME OF SYSTEM: 


b7E 


FBI SYSTEM CONTACT PERSON 

FBI OGC/PCLU POC 

Name: [ ) 

Name:| | 

Program Office: 1 1(1124) 


Division: SecD 

Phone:l 1 

Phone: 1 j 


Room Number: 1001 Penn Ave PA-555 

Room Number: 7338 

Date PTA submitted for approval: 



FBI DIVISION APPROVALS 



Program Division: Security 

FBIHQ. Division: Security 

Program Manager 

Signature:/s/ 

Signature:/s/ 

(or other appropriate 

Date signed: 7/23/07 

Date signed: 7/23/07 

executive as Division 

Name: | | 

Name: Paul S. White 

determines) 

Title: Unit ChiefJ pecD 

Title: Section Chief| ~j 

Division Privacy Officer 

Signature:/s/ 

Signature:/s/ 


Date signed: 7/23/07 

Date signed: 7/23/07 


Name: Jeffery J. Berkin 

Name: Jeffery J. Berkin 


Title: Acting AD, SecD 

Title: Acting AD, SecD 


FINAL FBI APPROVAL: 


FBI Privacy and Civil Liberties Officer 

Signature: /s/ 



Date Signed: 7/30/07 



Name: 

David C. Larson 


Title: 

Acting Deputy General Counsel 


1 - Signed original to 190-HQ;C1321794 
Copies: 

1 - DOJ Privacy and Civil Liberties Office-Main Justice, Room 4259 

2 - FBI OCIO / OIPP 

1 - FBI SecD (electronic copy via e-mail) 

2* - Program Division POC/Privacy Officer 
2*- FBIHQ_ Division POC /Privacy Officer 

(*please reproduce as needed for Program/Division file(s)) 


1 - OGC\PCLU intranet website 
1 - PCLU Library 
1-PCLU Tickler 
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FBI PRIVACY THRESHOLD ANALYSIS (PTA) 
NAME OF SYSTEM: _ ~ 


b7E 


(OGC/PCLU (Rev. 07/06/07) 


For efficient:)/, a system owner or program manager can be aided in making the determination of whether a Privacy Impact Assessment 
(PIA) is required by conducting and following Privacy Threshold Analysis (PTA). 

Whether or not a PIA is required, the system owner/program manager should consult with the FBI Records Management Division (RMD) to 
identify and resolve any records issues relating to information in the system. 

A PTA contains basic questions about the nature of the system in addition to a basic system description. The questions are as follows: 

A. General System Description: Please briefly describe: 

1. Type of information in the system: 

a. If the system is solely related to internal government operations please provide a brief explanation of the quantity 

and type of employee/contractor information: 


b7E 


2. Purpose for collecting the information and how it will be used: 


Information contained in thj~ | 

b7E 
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FBI PRIVACY THRESHOLD ANALYSIS (PTA) 
NAME OF SYSTEM: j 


b7E 


(OGC/PCLU (Rev. 07/06/07) 


3. The system's structure (including components/subsystems): 


epic.org 
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FBI PRIVACY THRESHOLD ANALYSIS (PTA) 

NAME OF SYSTEM: | | b7E 


(OGC/PCLU (Rev. 07/06/07) 
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FBI PRIVACY THRESHOLD ANALYSIS (PTA) 
NAME OF SYSTEM: j 


b7E 


(OGC/PCLU (Rev. 07/06/07) 


4. Means of accessing the system and transmitting information to and from the system: 


5. Who within FBI will have access to the information in the system and controls for ensuring that only authorized 
persons can access the information: 


Each division CSO is responsibleforj 


accessed through a unique user login and password. |^~ 


T 


^n£can only be 


| | User's s hall safeguard their passwo rds per b7E 

standard FBI security guidelines. | | 

| | System servers will reside in secure, FBI-controlled space. 

6. Who outside the FBI will have access to the information in the system and controls for ensuring that only authorized 
persons can access the information: 


c 


^(system troubleshooting and maintenance) may be able to access^ 


^during oi 


diagnostic and repair visits. |~ 

| p nd is aware of Privacy Act compliance requirements. Controls in place include pre-approved, supervised, on-si 

access fortroubleshooting and technical assistance visits as well as network monitoring by the EOC. 

7. Has this system been certified and accredited by the FBI Security Division?_Yes _x_No 

Ongoing Action. The system is projected to obtain full system accreditation. 


8 Is this system encompassed within an OMB-300? _Yes 


(No 


I. Was the system developed prior to April 17,2003? 


YES (If "yes," proceed to Question 1.) 

c_ NO (If "no," proceed to Section II.) 
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FBI PRIVACY THRESHOLD ANALYSIS (PTA) 
NAME OF SYSTEM: I 
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(OGC/PCLU (Rev. 07/06/07) 


1. Has the system undergone any significant changes since April 17,2003? 

_YES If "yes," please explain the nature of those changes: 

_NO (If "no," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) for review, approval, 

and forwarding to DOJ's Privacy and Civil Liberties Office. Unlessyou are otherwise advised, no PIA is required.) 

2. Do the changes involve the collection, maintenance, or dissemination of information in identifiable form about individuals? 

_YES (If "yes," please proceed to Question 3.) 

_NO (If "no,"the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) for review, approval, 

and forwarding to DOJ's Privacy and Civil Liberties Office. Unlessyou are otherwise advised, no PIA is required.) 

3. Is the system solely related to internal government operations? 

_YES If yes," is this a Major Information System (as listed on OGC's FBINET website)?: 

_Yes. (If "yes," afull PIA is required.. PTA is complete.) 

_No. (If "no," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) for 

review, approval, and forwardingto DOJ's Privacy and Civil Liberties Office. Unlessyou are otherwise advised, 
no PIA is required. (FBI and DOJ reviewing officials reserve the right to require a PIA.)) 

_NO (If "no,"go to section III to determine if afull or short-form PIA is required.) 


II. For systems developed after April 17, 2003. 

1. What is the purpose of the system? (Answer in detail unless details already provided in A. 2 above): 







FBI PRIVACY THRESHOLD ANALYSIS (PTA) 
NAME OF SYSTEM: I 


b7E 


(OGC/PCLU (Rev. 07/06/07) 


accessed by authorized personnel within each respective Division. 

2. Does the system collect, maintain or disseminate information in identifiable form about individuals? 

_x_YES (If "yes," please proceed to Question 3.) 

_NO (If "no," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) for 

review, approval, and forwarding to DOJ's Privacy and Civil Liberties Office. Unless you are otherwise advised, no 
PIA is required.) 


3. Is the system solely related to internal government operations? 

_x_YES If "yes," is this a Major Information System (as listed on OGC's FBINET website)?: 

_Yes. (If "yes," afull PIA is required.. PTA is complete.) 

_x_No. (If "no," the PTA is complete and should be sent to 

FBI OGC's Privacy and Civil Liberties Unit (PCLU) for review, approval, 
and forwarding to DOJ's Privacy and Civil Liberties Office. Unlessyou 
are otherwise advised, no PIA is required. (FBI and DO) reviewing 
officials reserve the right to require a PIA.)) 

_NO (If "no,"go to section III to determine if afull or short-form PIA is required.) 

III. Full or Short-Form PIA 

1. Is the system a major information system (as listed on OGC's FBINET website)? 

_YES (If "yes," afull PIA is required. PTA is complete.) 

_NO (If "no," please continue to question 2.) 

2. Does the system involve routine information AND have limited use/access? 

_YES A short-form PIA is required. (l.e.,you need only answer Questions 1.1,1.2,2.1,3.1,4.1,5.1 (if 

appropriate), 6.2,6.3, and 8.9 
of the PIA template.) Please 

note that FBI and DOJ 
reviewing officials reserve the 
right to require completion of 
afull PIA. (PTAis 
complete—forward with PIA.) 
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FBI PRIVACY THRESHOLD ANALYSIS (PTA) 
NAME OF SYSTEM: j 


NO (If "no," a full PIAis required. 
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FBI Privacy Threshold Analysis (PTA) Cover Sheet (ogc/pclu(R ev. 1/17/07) 


NAM EOF SYSTEM: Explosives Reference tool (EXPeRT) 

FBI SYSTEM CONTACT PERSON 

Name: | | 

Program Office: Explosives Unit 

Divisi on: Laboratory b7c 

Phone ] | 

Room Number: 4210 

Date PTA submitted for approval: 31 JAN 2007 


FBI DIVISION APPROVALS 



Program Division: Laboratory 

FBIHC1 Division: Laboratory 

Program Manager 

Signature: 

Signature: /s/ 

(or other appropriate 

Date signed: 

Date signed: 31 Jan 07 

executive as Division 

Name: 

Name l_1 

determines) 

Title: 

Title: Forensic Systems Program Mgr 

Division Privacy Officer 

Signature: 

Signature: /s/ 


Date signed: 

Date signed: 2/8/07 


Name: 

Name l_1 


Title: 

Title: Lab Division Privacy Officer 


FINAL FBI APPROVAL: 


FBI Privacy and Civil Liberties Officer 

Signature: /s/ 



Date Signed: 4/18/07 



Name: 

Patrick W. Kelley 


Title: 

Deputy General Counsel 


1 - Original signed copy to 190-HQ.-C1321794 
Copies: 

1 - DOJ Privacy and Civil Liberties Office-Main Justice, Room 4259 
1 - FBI OCIO 

1 - FBI SecD (electronic copy via e-mail) 

2* - Program Division POC /Privacy Officer 
2*- FBIHQDivision POC/Privacy Officer 

(*please reproduce as needed for Program/Division file(s)) 


1 - OGC\PCLU intranet website 
1 - PCLU Library 
1-PCLU Tickler 
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FBI PRIVACY THRESHOLD ANALYSIS (PTA) 

NAME OF SYSTEM: Explosives Reference Tool (EXPeRT) 

For efficiency, a system owner or program manager can be aided in making the determination of whether a Privacy Impact Assessment (PIA) is 
required by conducting and following Privacy Threshold Analysis (PTA). 

A PTA contains basic questions about the nature of the system in addition to a basic system description. The questions are as follows: 

A. General System Description: Please briefly describe: 


1. Type of information in the system: 

a. Reports of Results of Forensic Examinations of Evidence Submissions 

b. Reference Material | ~ 

c. Explosives incident reports from FBI, other law enforcement agenciesj 


b7E 


2. Purpose for collecting the information and how it will be used: 

a. Forensic Reports created by Lab Division examiners are maintained for future reference as an assist in conducting exams and answering 
queries for future cases. 

b. Reference material assists the examiners in developing conclusions 

c. Incident reports are maintained to help FBI examiners and other Law Enforcement Officials draw conclusions as to patterns and 
trends, find similar cases from which they can apply lessons learned, or tie 

cases or incidents together. 


3. The system's structure (including components/subsystems): 


b7E 


4. Means of accessing the system and transmitting information to and from the system: 

The system is accessed via a web browser from any network connected PC. 

5. Who within FBI will have access to the information in the system and controls for ensuring that only authorized persons can 
access the information: 

Access controls are maintained by the system Program Manager in the Lab Division Explosives Unit. Access is controlled by user 
accounts that are created by either the PM or the system SSO. Determination of who is authorized to be issued a system account is 

made by the Unit Chief of the Explosives Unit, Laboratory Division. 

6. Who outside the FBI will have access to the information in the system and controls for ensuring that only authorized persons can 
access the information: 

Access Controls for personnel outside the FBI are maintained and implemented as described above for FBI Personnel. Personnel from 
outside the FBI who may be granted access include members of | | 

Local Law Enforcement Agenciesj ” " " ” __ ~ 


7. Has this system been certified and accredited by the FBI Security Divisions? _X_Yes _No 
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FBI PRIVACY THRESHOLD ANALYSIS (PTA) 

NAME OF SYSTEM: Explosives Reference Tool (EXPeRT) 


8 Is this system encompassed within an OMB-300? _Yes _X_No _Don't Know 

I. Was the system developed prior to April 17, 2003? 

X YES (If "yes," proceed to Question 1.) 

_NO (If "no," proceed to Section II.) 

1. Has the system undergone any significant changes sinceApril 17,2003? 

_YES If "yes," please explain the nature of those changes: 


(Continue to Question 2.) 

X NO (If "no,"the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) for review, approval, and 

forwarding to DOJ's Privacy and Civil Liberties Office. Unlessyou are otherwise advised, no PIA is required.) 

2. Do the changes involve the collection, maintenance, or dissemination of information in identifiable form about individuals? 

_YES (If "yes," please proceed to Question 3.) 

_NO (If "no," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) for review, approval, and 

forwarding to DOJ's Privacy and Civil Liberties Office. Unlessyou are otherwise advised, no PIA is required.) 

3. Is the system solely related to internal government operations? 

_YES If yes,” is this a Major Information System (as listed on OGC's FBINET website)?: 

_Yes. (If "yes,” afull PIA is required.. PTA is complete.) 

_No. (If "no," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) for review, 

approval, and forwardingto DOJ's Privacy and Civil Liberties Office. Unlessyou are otherwise advised, no PIA is required. 
(FBI and DOJ reviewing officials reserve the right to require a PIA.)) 

_NO (If "no," go to section III to determine if afull or short-form PIA is required.) 


II. For systems developed after April 17, 2003. 

1. What is the purpose of the system? The purpose of EXPeRT is to provide a system repository for laboratory forensic reports and 
explosives reference material to assist Laboratory Examiners and FBI Special Agent Bomb Technicians in investigating explosives 
related incidents . 

(Continue to Question 2.) 
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FBI PRIVACY THRESHOLD ANALYSIS (PTA) 

NAME OF SYSTEM: Explosives Reference Tool (EXPeRT) 


2. Does the system collect, maintain or disseminate information in identifiable form about individuals? 

_YES (If "yes," please proceed to Question 3.) 

_NO (If "no," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU)for review, approval, and 

forwarding to DOJ's Privacy and Civil Liberties Office. Unlessyou are otherwise advised, no PIA is required.) 


3. Is the system solely related to internal government operations? 

_YES If "yes,” is this a Major Information System (as listed on OGC's FBINET website)?: 

_Yes. (If "yes," afull PIA is required.. PTA is complete.) 

_No. (If "no," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) for 

review, approval, and forwardingto DOJ's Privacy and Civil Liberties Office. Unlessyou are otherwise advised, no 
PIA is required. (FBI and DOJ reviewing officials reserve the right to require a PIA.)) 

_NO (If "no,"go to section III to determine if afull or short-form PIA is required.) 


III. Full or Short-Form PIA 


1. Is the system a major information system (as listed on OGC's FBINET website)? 
_YES (If "yes," afull PIA is required. PTA is complete.) 

_NO (If "no," please continue to question 2.) 

2. Does the system involve routine information AND have limited use/access? 


_YES A short-form PIA is required. (l.e.,you need only answer Questions 1.1,1.2,2.1,3.1,4.1,5.1 (if appropriate), 6.2,6.3, and 8.9 

of the PIA template.) Please note that FBI and DO) reviewing 
officials reserve the right to require completion of afull PIA. (PTA 
is complete—forward with PIA.) 


(If "no," a full PIA is required. 


PTA is complete.) 
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FBI PRIVACY THRESHOLD ANALYSIS (FI'A) 

NAME OF SYSTEM / f MO-IECIS | | 

BIK.R FBI 1 ft*}** \sN»n HV S Pom" ' -... 


b6 

b7C 


Be freed Fuats:: 

<T4n! PROMT I l»OC f“l 

FBI OCCTCLB POO 

Clerreofed Bat 

Name: Else?. ErmTl h- 

Name: AGC| I 

t>eeB:AA;A Om 

Program Of flee: G'yptok>gk and F.Txaromc 

A naives Unk •CEABj .^mANy 

Dhdslos: OTD k-a e 

«*"*l 1 

Room Ntnnner: 7-md IBB 


P:\me | 1 



■, ' A V V 



FBI DIVISION INTERMEDIATE APPROVALS 


Program Maoagor {os' otser i?ppr->:>s" 
exeeutrvv m Divkkm determmsA) 


SigmdmmF 

Age omF/B r- tt~ 

Name: SS \ | 

Title: DC CLAN 



Program Division 
DivMon (O/rD.; 


Signature: 
Date signed: 
Name: 
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HATE 10-20-?014 BY NSICG/C32W33B91 



CHECKLIST FOE PRIVACY COMPLIANCE FOR 
FBI ROUTI NE BATA BASES 
(including comparable applkubions) 



This dieddisf Is based on the FBI Frivaey Impact Assessment (FIA) for FBI Routine 
(dm/m as approved d/2W0fi (IAIFI:IQ~C:B2I7M fou ml 02 9mm). Li 
accordance with ike FI A, diis checklist may foe used (n hen of any addltfomd FI A C«r 
FI' \y m> long aa every oar of the twelve Flocks below can foe cheeked, Tfols checklist 
should foe completed foy she database manager (or otfoer appropriate official/ as 
deteronoed by tie division) sod approved foy ffoe BtvRkm Privacy Officer, 

A. Provide dote checklist prepared: i cfoiiksh , S ' I 

Ik Provide a genet al description of die system or project that includes: name of die 
system/projeeL including associated acronyms; structure of die system/projeeh 
purpose; oat ore of the Information io ffoe system and lorn it will he used; who will 
have access to ffoe information Io the system and ffoe manner of transmission to all 



C, Complete checklist (all most he cheeked as .being accurate for the 
datofoase/application); 


X I. In.fomtati.on In flic system idcoiilles individuals* either directly or 

* iduftS ' \ 1 'uJo, dud om i\ denuded oueuvFx ifoyougfe s^mhmemmd 



















X A The system can be accessed only by members of a particular office, eon, squad 
or other smfoar FBI enihy and sharing of information is bused sfoshy on an 
operational need io know. 





this PL\ .for | ' ~| dns been prepared because the ex 1 sun* privacy docnment.ar.fon is 

X 12 . Any personally idemmahie information. placed on a mobile device or on 


lb fo 1' I... A A SI ¥ IE D x Ft) II. C } F F1 c f A L I ■ S :E () N |. y' 
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IF If a database contains information that way be considered 
seositivCeonfruversiaf or Is maintained sts port of a larger FBI program, the 
database iKla.no bur a lor or pfogmrs manager (or dh Kmu privacy officer) most 
consult with the FBI's Office of the General Counsel, Privacy ami Civil Liberties 
l nk about the potential need to assess the privacy risks to a separate FIA. 

E, File Notes (stsarnsras any additional information that may be warranted for 
record purposes, e,g.» coordination with OtIC \ eteo; 



DISTRIMiriON; 

- File signed original (or copies) in one or more o . » » f*ogi 1 ' Pius for 

m i i ve\iu>t re o fv id \i (Wdi „ .ago ^ 

■ Pore m.: ,<>p> m u FBI, Porno nnaCn. 5 UKaoi.- > oPAVl i i : "7 5-:' 
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^T// UNCLASSIFIED WHEN SEPARATED FROM ATTACHMENT 
FBI Privacy Threshold Analysis (PTA) Cover Sheet (ogc/pclu(R ev. 1/17/07) 


NAMEOFSYSTEM| I b3 

b7E 

FBI SYSTEM CONTACT PERSON 

Name: | _ "" "] 

Program Office: Data Acquisition Intercept Section /Special Projects Technology Unit 

Divisi on: Operational T echnology Division 

Phone : | 1 

Room Number: ERF Annex 

Date PTA submitted for approval: 3/26/2007 


b6 

b7C 


FBI DIVISION APPROVALS. A PIA (and/or PTA) should be prepared/approved by the cognisant program management in 
collaboration with IT, security, and end-user management and OGC/PCLU. (PIAs/PTAs relating to electronic forms/questionnaires implicating 
the Paperwork Reduction Act should also be coordinated with the RMD Forms Desk.) It the subject of a PTA/PIA is under the program 
cognizance of an FBIHQ Division, prior to forwarding to OGC the PTA/PIA must also be referred to the FBiHQ Divislon for program review and 
approval if required by the FB!MQ_Division. 



Program Division: Special Projects Technology LJnit 

FBIHC/Division: Operational Technology Division 

Program Manager 
(or other appropriate 

executive as Division 

determines) 

Signature: /S/ 

Date signed: 10/03/07 

Signature: /S/ 

Date signed: 10/03/07 

Name) j 

NameJ ] 

Title: Program Manager 

Title: Program Manager 

Division Privacy Officer 

Signature: /S/ 

Date signed: 10/05/07 

Name: SSA Charles Bariy Smith 

Title: Section Chief 

Signature: /S/ 

Date signed: 10/05/07 

Name: SSA Charles Barry Smith 

Title: Section Chief 


Upon Division approval, forward signed hard copy plus electro 

FINAL FBI APPROVAL: 

nic copy to OGC/PC. 

LU (JEH Room 7338). 

FBI Privacy and Civil Liberties Officer 

Signature: 

N 


Date Signed: 

10/31/07 


Name: 

David C. Larson 


Title: 

Acting Deputy General Counsel 


Upon final FBI approval, FBi OGC will distribute as follows: 


1 - Original signed copy to 190-HQ-C1321794 
Copies: 


1 - DOJ Privacy and Civil Liberties Office-Main Justice, Room 4259 
1 - FBI OCIO 

1 - FBI SecD (electronic copy via e-mail) 

2* - Program Division POC/Privacy Officer 
2*- FBIHQDivision POC /Privacy Officer 

(*please reproduce as needed for Program/Division file(s)) 
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1 - OGC\PCLU intranet website 
1 - PCLU Library 
1-PCLU Tickler 
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ation of whether a Privacy Impact Assessment (PIA^ 


;m description.The questions are as follows: 


provide a brief explanation of the quantity and type of 










5. Who within FBI will have access to the information in the system and controls for ensuring that only authorized persons can 

access the information: FBI employees with the requisite "need to know" are the only individuals allowed access to the system. End-users and 
administrators are the only individuals that have the ability to log on to th ^ | Each Case Manager for a specific investigation will 

determine who will have access to his/her case. 

6. Who outside the FBI will have access to the information in the system and controls for ensuring that only authorized persons can 
access the information: No one outside of the FBI will have the capability to access the system and extract information. The Case Manager has 
the responsibility of disseminating case- related information if appropriate. 

7. Has this system been certified and accredited by the FBI Security Divisions? _Yes X No 

Certification and Accreditation is pending and is anticipated to be completed by December 2007. 

8 Is this system encompassed within an OMB-300? _Yes X_No _Don't Know 

(if yes, please attach copy of latest one.) 


Was the system developed prior to April 17, 2003? 

X Y ES (If "yes," proceed to Question 1.) 

bl 
b3 
b7I 

_YES If "yes," please explain the nature of those changes: 

(Continue to Question 2.) 



X _ NO (If "no," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) fo 

approval, and forwarding to DOJ's Privacy and Civil Liberties Office. Unless you are otherwise advised, no PIAis required.) 
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FBI PRIVACY THRESHOLD ANALYSIS (PTA) 
NAME OF SYSTEM: | ] 


b3 
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2. Do the changes involve the collection, maintenance, or dissemination of information in identifiable form about individuals? 

_YES (If "yes," please proceed to Question 3.) 

_NO (If "no," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU)for review, approval, 

and forwarding to DOJ's Privacy and Civil Liberties Office. Unlessyou are otherwise advised, no PIA is required.) 

3. Is the system solely related to internal government operations? 

_YES If yes,” is this a Major Information System (as listed on OGC's FBINET website)?: 

_Yes. (If "yes,” afull PIA is required.. PTA is complete.) 

_No. (If "no," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU)for review, 

approval, and forwardingto DOJ's Privacy and Civil Liberties Office. Unless you are otherwise advised, no PIA is required. 
(FBI and DOJ reviewing officials reserve the right to require a PIA.)) 

_NO (If "no,"go to section III to determine if afull or short-form PIA is required.) 


For systems developed after April 17, 2003. 

1. What is the purpose of the system? (Answer in detail unless details already provided in A. 2 above): 


(Continue to Question 2.) 

2. Does the system collect, maintain or disseminate information in identifiable form about individuals? 

_YES (If "yes," please proceed to Question 3.) 

_NO (If "no," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU)for review, approval, and 

forwarding to DOJ's Privacy and Civil Liberties Office. Unlessyou are otherwise advised, no PIA is required.) 


3. Is the system solely related to internal government operations? 


_YES If "yes,” is this a Major Information System (as listed on OGC's FBINET website)?: 

_Yes. (If "yes," afull PIA is required.. PTA is complete.) 


No. (If "no," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU)for 
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FBI PRIVACY THRESHOLD ANALYSIS (PTA) 
NAME OF SYSTEM: I ~1 
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review, approval, and forwarding to DOJ's Privacy and Civil Liberties Office. Unless you are otherwise advised, no 
PIA is required. (FBI and DOJ reviewing officials reserve the right to require a PIA.)) 

_NO (If "no," go to section III to determine if a full or short-form PIA is required.) 


Full or Short-Form PIA 


1. Is the system a major information system (as listed on OGC's FBINET website)? 
_YES (If "yes," a full PIA is required. PTA is complete.) 

_NO (If "no," please continue to question 2.) 

2. Does the system involve routine information AND have limited use/access? 


_YES A short-form PIA is required. (l.e.,you need only answer Questions 1.1,1.2,2.1,3.1,4.1,5.1 (if appropriate), 6.2,6.3, and 8.9 

of the PIA template.) Please note that FBI and DO) reviewing 
officials reserve the right to require completion of a full PIA. (PTA 
is complete—forward with PIA.) 


_NO (If "no,"a full PIA is required. PTA is complete.) 
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